Privacy Policy

1. Introduction

Furet ("we," "our," or "us") operates the furet.co platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and organization details. If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store credit card numbers.

Usage Data

We collect information about how you use the service, including prospect research counts, email composition metrics, and feature usage patterns. This data is used to enforce plan limits and improve the service.

Prospect Data

Prospect data you import or research through Furet (business names, websites, contact information) is stored within your organization's isolated data space. We do not share prospect data between organizations.

3. How We Use Your Information

We use collected information to:

• Provide and maintain the Furet service
• Process your transactions and manage your subscription
• Enforce usage limits per your plan
• Send transactional emails (account confirmations, billing receipts)
• Improve and optimize the service
• Comply with legal obligations

Google user data exception: Data obtained through Google APIs (including Gmail OAuth tokens and email address) is used solely to provide the email-sending functionality you requested. Google user data is not used for service improvement, analytics, advertising, or any purpose other than sending emails on your behalf as described in Section 6.

4. Data Isolation

Furet is a multi-tenant platform. All prospect data, campaign data, and research results are strictly isolated per organization. No organization can access another organization's data.

5. Third-Party Services

We use the following third-party services:

• Stripe for payment processing
• Google APIs (Gmail API) for sending emails via your connected Google Workspace account
• Microsoft APIs (Microsoft Graph) for sending and receiving emails via your connected Microsoft 365 account
• Resend for receiving inbound reply emails via webhook
• AI providers (Google Gemini, OpenAI) for website analysis and email composition

Each service has its own privacy policy. We share only the minimum data necessary for each service to function. Google user data (OAuth tokens, Gmail account information) is never shared with AI providers or any other third-party service. AI providers only receive prospect website content and campaign context — never your Google account data.

6. Google API – Use of Gmail Data

When you connect your Google Workspace account to Furet, we request access to the following Gmail API scopes with your explicit OAuth consent:

• gmail.send — to send outreach emails from your mailbox on your behalf
• userinfo.email — to identify which Google account you are connecting

How reply detection works

Furet does not read your Gmail inbox. Instead, outreach emails include a Reply-To address on a Furet-owned domain. When a prospect replies, the response is delivered to Furet's inbound email service, where it is classified (e.g., interested, not interested, out of office, bounce) and the follow-up sequence is updated accordingly. Your Gmail inbox is never accessed or scanned.

What we store

We store OAuth tokens (encrypted) to maintain your mailbox connection, the email addresses of connected mailboxes, message IDs and thread IDs for emails sent through Furet, and the classification result of detected replies (e.g., "interested"). We do not store the full content of incoming replies.

How to revoke access

You can disconnect your Google account at any time from your Furet mailbox settings. This immediately revokes our access. You can also revoke access from your Google Account permissions page. Upon disconnection, stored OAuth tokens are deleted.

7. Google API Services User Data Policy

Furet's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, Furet:

• Only uses Gmail access to send emails on your behalf as described in this policy — this is the sole purpose for which Google user data is accessed
• Does not use Google user data to improve or develop new features, conduct analytics, or for any purpose other than providing the email-sending functionality
• Does not read, scan, or access your Gmail inbox
• Does not transfer Gmail data to third parties, except as necessary to provide the service, comply with applicable laws, or as part of a merger or acquisition
• Does not use Gmail data for advertising or to serve ads
• Does not allow humans to read Google user data unless required for security purposes, to comply with applicable law, or with the user's affirmative consent

8. Microsoft API – Use of Email Data

When you connect your Microsoft 365 account to Furet, we request access to send emails on your behalf and read incoming replies in threads initiated by Furet. The same data handling principles described above for Google apply: we only access outreach-related threads, do not store full reply content, and you can disconnect at any time from your Furet mailbox settings.

9. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where retention is required by law.

OAuth tokens for connected email accounts are deleted immediately when you disconnect a mailbox or delete your account.

10. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), access controls, and isolated data storage per organization.

11. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data
• Withdraw consent for data processing

To exercise these rights, contact us at privacy@furet.co.

12. Cookies

Furet uses essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

14. Contact

For questions about this Privacy Policy, contact us at privacy@furet.co.